Qualcomm Xrv7209 vulnerabilities
38 vulnerabilities
Known vulnerabilities in Qualcomm Xrv7209, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-59604qualcomm, inc.snapdragon+258
EPSS score0.07%
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.CVE-2025-59610qualcomm, inc.snapdragon+229EPSS score0.06%
Memory Corruption when processing IOCTL requests with mismatched API versions due to concurrent modification of user-space buffer.CVE-2025-59606qualcomm, inc.snapdragon+141EPSS score0.07%
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.CVE-2025-59615qualcomm, inc.snapdragon+60EPSS score0.09%
Memory Corruption when invoking device input/output control operations for mapping and unmapping persistent memory buffers due to improper synchronization.CVE-2025-47401qualcomm, inc.snapdragon+241EPSS score0.22%
Transient DOS when processing target power rate tables during channel configuration.CVE-2025-47389qualcomm, inc.snapdragon+176EPSS score0.10%
Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.CVE-2025-47407qualcomm, inc.snapdragon+100EPSS score0.05%
Memory corruption while creating a process on the digital signal processor due to allocation failure at the kernel level.CVE-2025-47403qualcomm, inc.snapdragon+254EPSS score0.22%
Transient DOS when processing a malformed Fast Transition response frame with an invalid header structure during wireless roaming.CVE-2025-47374qualcomm, inc.snapdragon+29EPSS score0.07%
Memory Corruption when accessing freed memory due to concurrent fence deregistration and signal handling.CVE-2026-21383qualcomm, inc.snapdragon+52EPSS score0.10%
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.CVE-2026-21381qualcomm, inc.snapdragon+102EPSS score0.15%
Transient DOS when receiving a service data frame with excessive length during device matching over a neighborhood awareness network protocol connection.CVE-2026-21370qualcomm, inc.snapdragon+90EPSS score0.08%
Memory Corruption when validating input batch size and buffer plane count exceeds maximum allowed values.CVE-2026-21384qualcomm, inc.snapdragon+79EPSS score0.08%
Memory Corruption when updating prepared commands with invalid port indices based on user space input exceeds supported read client limits.CVE-2026-21368qualcomm, inc.snapdragon+90EPSS score0.08%
Memory Corruption when parsing jpeg commands due to unaccounted extra writes to the buffer during validation checks.CVE-2026-21367qualcomm, inc.snapdragon+149EPSS score0.20%
Transient DOS when processing nonstandard FILS Discovery Frames with out-of-range action sizes during initial scans.CVE-2026-21369qualcomm, inc.snapdragon+107EPSS score0.08%
Memory Corruption when handling flash commands due to outdated LED count values being used after userspace modification.CVE-2026-25275qualcomm, inc.snapdragon+369EPSS score0.19%
Transient DOS when processing authentication frames with invalid FILS information element header lengths.CVE-2026-25270qualcomm, inc.snapdragon+197EPSS score0.07%
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver.CVE-2026-25302qualcomm, inc.snapdragon+285EPSS score0.06%
Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed.CVE-2026-25269qualcomm, inc.snapdragon+153EPSS score0.07%
Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size.